General
- Target File.exe
- Size 6.2MB
- Sample240818-pygftsteld
- SHA256 e56209567fa12794362b0c68d5f4a14bce9895ec878aa1bfa5cbb73cc93d41d4
- MD5 7062ea74c54013ebf96549cdf599951d
- SHA1 545699b9ceda9f6a14c41b2d8344ced8e30e0b4f
- SHA512 05e87411bed103f2f89c8ef41d6faf2295f8682ad43f3e091697ef65541b9bebd969b810842ff8646b4a75e8fd837887b3dcac28df45f0de59bad4c8dc7ee4b6
- SSDEEP 196608:36cmOe56MPwP275wEPFLhbljK9ZZ2+ihH/9:qX5lwPi51l4Z2+eHV
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
File.exe
Resource
win7-20240704-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target File.exe
- Size 6.2MB
- SHA256 e56209567fa12794362b0c68d5f4a14bce9895ec878aa1bfa5cbb73cc93d41d4
- MD5 7062ea74c54013ebf96549cdf599951d
- SHA1 545699b9ceda9f6a14c41b2d8344ced8e30e0b4f
- SHA512 05e87411bed103f2f89c8ef41d6faf2295f8682ad43f3e091697ef65541b9bebd969b810842ff8646b4a75e8fd837887b3dcac28df45f0de59bad4c8dc7ee4b6
- SSDEEP 196608:36cmOe56MPwP275wEPFLhbljK9ZZ2+ihH/9:qX5lwPi51l4Z2+eHV
- MD5 SHA1 SHA512 SSDEEP
-
Modifies firewall policy service
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext